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This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

Claim 1 (currently amended): A method for on-line mass distribution of data products to end 
users, the method comprising: 

maintaining a first portion of each of said data products at a first location; 

inamtaining a second portion of each of said data products at a second location; 

for each of said end users, confirming the end user's entitlement to one of said data 
products; 

obtaining a first portion of said one of said data products from said first location and a 
second portion of said one of said data products from said second location; 

combining said first portion of said one of said data products and Said second portion 

of said one of said data products,. Nereis said step of nomhining k n-fi™* ^ „ 

location: and 

providing said combined first portion and second portion to said user. 

Claim 2 (original); The method of claim 1, wherein said data products include 
databases. 

Claim 3 (original): The method of claim 1, wherein said date products include digital 

copies of movies. 

Claim4 (original): The method of claim l, wherein said data products include digital 
copies of musical songs, 

Claim 5 (original): The method of claim I, former comprising the step of: 
encrypting said first portion of each of said data products. 

Claim 6 (original): The method of claim I, further comprising the step of: 

prior to the step of combining, encrypting said first portion of one of said data 
products. 
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Claim 7 (canceled): 



Claim 8 (currently amended): A system for secure on-line mass distribution of data products 
to end users comprising: 

an authorization server having associated therewith copies of first portions of a 
plurality of data products; 

a plurality of data distribution terminals, each of which has associated therewith copies 
of second portions of said plurality of data products; 

a communications system that provides for exchange of data between said 
authorization server and said plurality of data distribution temimals, and 

a data distribution program that provides copies of said data products to those end 
users who are entitled to have said copies thereof; wherein said data distribution program 
provides a copy of a data product by combining a copy of the first portion of said data product 
obtained from said authorization server with a copy of the second portion of said data product 
obtained from one of said plurality of data distribution terminal s, wherein said step of 
combining is performed at a location of said nn* o f 5aid nlmafftv *f data fiction 
terminals. 



Claim 9 (original): The system of claim 8, wherein said authorization server also has 
associated therewith an authorization database containing data mdicating entitlement by said 
end users to copies of said data products. 
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Claim 10 (original): A system for securely conveying a data product, the data product 
defining a first portion and a second portion, the first portion defining at least one key to the 
second portion, the system comprising, in combination: 

a first entity maintaining the first portion; 

a second entity niamtaimng the second portion; 

a first set of logic executable by me first entity to encrypt the first portion so as to 
produce an encrypted first portion that can be decrypted using a first decryption key, wherein 
the first entity sends the encrypted first portion via a telecommunications link to the second 
entity; and 

a second set of logic executable by tie second entity, upon receipt of the encrypted 
first ponton, to record onto a storage medium the encrypted first portion and the second 

portion, 

wherein the storage medium may be provided to a third entity, which, if provided with 
access to the first decryption key, can in turn access the data product 

Claim 11 (original): Tie system of claim 10, wherein the first entity sends to the second 
enfcty, togefcer with tile encrypted first portion, an encrypted authorization key that can be 
decrypted using a second decryption key so as to reveal verification information indicative of 
an entity authorized to access the data product, and wherein the second set of logic is further 
executable to record onto the storage medium the encrypted authorization key. 

Claim 12 (original): Tie system of claim 11. wherein the second decryption key is derived 
as a function of an environmental parameter. 

Claim 13 (original): The system of claim 12, wherein the environmental parameter 
compnses an identification code associated with the entity authorized to access the data 
product. 
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Claim 14 (original): The system of claim 11, wherein the third entity has access to the 
second decryption key, the system further comprising: 

a third set of logic executoble by the third entity to decrypt the encrypted authorizatioa 
key, to thereby gain access to the verification information, and to use the verification 
information to validate use of the data product. 

Claim 15 (original): The system of claim U, wherein the third entity has access to the 

second decryption key, the system further comprising: 

a third set of logic executable by the third entity to decrypt the encrypted authorization 
information, to thereby gain access to the verification information, and to compare at least a 
portion of the verification information to predetermined information associated with the third 
entity so as to determine whether the mird entity is authorized to access the data product 

Claim 16 (original): The system of claim 15, wherein the predetermined information 
associated with the third entity comprises an identification code. 

Claim 17 (original): The system of claim 10, wherein the first entity sends to the second 
entity, together with the encrypted first portion, an encrypted authorization key that can be 
decrypted using a second decryption key so as to revea! verification information indicative of 

an entity authorized to store the data product. 

Claim 18 (orignxal): The system of claim 17, wherein the second decryption key is derived 
as a function of an environmental parameter. 

Claim 19 (original): The system of claim 18, wherein the environmental parameter 
comprises an identification code associated with the entity authorized to store the data 
product 
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Claim20 (original): The system of claim 17, wherein the third entity has access to the 
second decryption key, the system further comprising: 

atods «°^c™blebymem^ 
key, to thereby gain access to the verification information, and to use the verification 
information to validate storage of the data product. 

Claim 21 (original): n, systcra of claiaj 17> wb ^ ^ ^ ^ ^ ^ ^ ^ 

second decryption key, the system further comprising: 

^^"^ecutableby^^ 
mformaton, to thereby gain access to the verification information, and to compare at least a 
porfcon of the verification information to predetermined information associated with the 
stooge medium so as to determine whether the storage medium is authorised to store me data 
product. 

Claim 22 (ongmal): The system of claim 21, wherein the predetennined information 
assocated with the storage medium comprises an identification code. 

C^23 (original): The system of claim 10, wherein the data product comprises geogx^hic 
mformationandmetr^enn^ ^ 
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Claim 24 (original): A method for securely conveying a data product, the data product 
defining a first portion and a second portion, the first portion defining at least one key to the 
second portion, the method comprising, in combination: 

at a first entity, encrypting the first portion of the data product so as to produce an 
encrypted first portion that can be decrypted using a first decryption key; 

sending the encrypted first portion via a telecoironunications link from the first entity 
to a second entity; 

receiving the encrypted first portion at the second entity; 

at the second entity, recording onto a storage medium the encrypted first portion and 
the second portion; and 

thereafter providing the storage medium to a third entity, 

whereby, if the third entity has access to the first decryption key, the third entity may 
decrypt the encrypted first portion and thereby gain access to the data product. 

Claim 25 (original): The method of claim 24, further comprising sending to the second 
entity, together with the encrypted first portion, an encrypted authorization key that can be 
decrypted using a second decryption key so as to reveal verification information indicative of 
an entity authorized to access the data product. 

Claim 26 (original): The method of claim 25, further comprising generating the second 
decryption key as a function of an environmental parameter. 

Claim 27 (original): The method of claim 26, wherein the environmental parameter 
comprises an identification code associated with the entity authorized to access the data 
product. 
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Claim 28 (original): The method of claim 27, further comprising: 

the third entity generating the second decryption key as the function of the 
identification code; 

the third entity using the second decryption key to decrypt the encrypted authorization 
key and to thereby gain access to the verification information; and 

the third entity using the verification information to validate storage of the data 
product 

Claim 29 (original): Hie method of claim 25, further comprising: 

the third entity using the second decryption key to decrypt the encrypted authorization 
key and to thereby gain access to the verification ^formation; and 

the third entity using the verification information to validate use of the data product 

Claim 30 (original): The method of claim 29, wherein using the verification information to 
validate use of the data product comprises comparing at least a portion of the verification 
information to predetermined information associated with the third entity so as to determine 
whether the third entity is authorized to access the data product 

Claim 31 (original); The method of claim 30, wherein the predetermined information 
associated with the third entity comprises an identification code. 

Claim 32 (original): The method of claim 24, further comprising sending to the second 
entity, together with the encrypted first portion, an encrypted authorization key that can be 
decrypted using a second decryption key so as to reveal verification information indicative of 
an entity authorized to store the data product. 

Claim 33 (original): The method of claim 32, further comprising generating the second 
decryption key as a function of an environmental parameter. 
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CUm 34 (own* The method of claim 33 , wherem the environmental parameter 
compnses an identification code associated with the entity authorized to store the data 
product. 

Claim 35 (original): The method of claim 34, further comprising: 

the third entity generating the second decryption key as the function of the 

identification code; 

the third entity using the second decryption key to decrypt the encrypted authorization 
key and to thereby gain access to the verification information; and 

the third entity using the verification information to validate storage of the data 
product 

Claim 36 (original): The method of claim 32, further comprising: 

the third entity using the second decryption key to decrypt the encrypted authorization 
key and to thereby gain access to the verification information; and 

the third entity using the verification information "to validate storage of the dau 

product. 

Claim 37 (original): The method of claim 36, wherein using the verification information to 
vahdate storage of the dataproduct comprises comparing at least a portion of the verification 
mformataon to predetermined information associated with the storage medium so as to 
detenmne whether the storage medium is authorized to store the data product. 

Claim 38 (original): The method of claim 37, wherein the predetermined information 
assocutfed with the storage medium comprises an identification code. 

Claim 39 (original): The method of claim 24, wherein the data product comprises 
geographic information and the third entity comprises a navigation system. 
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